Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
File:                     627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json)
Hash identifier:          lD9CRpNJjq/Ktx5R+vvUKeZx9dlMamPUl6FT9/xK1lE=
Subject key identifier:   44:79:FE:4D:04:87:CF:E3:74:9A:AC:85:54:4D:4A:78:4A:8B:0C:E9
Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD
Certificate issuer:       /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
Certificate serial:       41A1E28AC23828903153414A8A00D5EB795B7B16
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
Manifest number:          C7
Signing time:             Fri 10 Jul 2026 05:55:02 +0000
Manifest this update:     Fri 10 Jul 2026 05:50:02 +0000
Manifest next update:     Sat 11 Jul 2026 08:04:02 +0000
Files and hashes:         1: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=)
                          2: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=)
                          3: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=)
                          4: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: DJFuTD+Doy/5u81TkSR9sdQfm1jlU1hGmeRcljKXL0o=)
                          5: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a1:e2:8a:c2:38:28:90:31:53:41:4a:8a:00:d5:eb:79:5b:7b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
        Validity
            Not Before: Jul 10 05:50:02 2026 GMT
            Not After : Jul 11 08:04:02 2026 GMT
        Subject: CN=4479FE4D0487CFE3749AAC85544D4A784A8B0CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:eb:1c:1a:ed:9e:b9:bb:a1:47:79:60:0a:
                    6a:bd:6c:2a:84:43:33:85:b7:fd:32:72:d6:8a:ef:
                    2b:3e:72:c2:f4:3c:c1:11:98:55:e3:72:56:bb:a8:
                    f1:6a:1e:33:39:dd:a5:86:e9:de:5a:f8:b6:5d:39:
                    b2:84:56:36:91:68:3d:a0:e4:0c:db:57:af:f7:57:
                    a2:88:c2:85:77:82:df:4c:09:86:17:d7:0b:d8:8b:
                    7d:9c:6a:cc:32:b3:8d:b9:e8:c8:9f:e6:ca:3c:ce:
                    9e:85:dc:e1:8c:b2:bd:34:59:d2:80:64:d7:34:47:
                    c8:d3:68:51:e6:b6:be:32:2c:cb:64:22:77:5c:c2:
                    1f:23:67:79:53:7f:f6:37:34:ed:39:5e:21:e1:9a:
                    1e:38:ce:ac:3b:53:79:d0:b1:cb:2d:2f:50:01:e7:
                    2f:d8:da:56:5d:10:3f:1b:67:74:ed:d8:ad:f4:26:
                    17:25:f0:24:ba:0b:2f:f6:6d:d2:9d:d0:62:c7:3a:
                    2d:c7:b7:86:07:a7:87:6e:6d:21:08:ec:45:99:62:
                    66:cc:1e:bc:d2:d9:d4:f7:e4:56:b4:c1:e6:36:35:
                    9d:7e:6f:65:84:81:08:ad:da:36:f7:74:42:82:d7:
                    00:fc:c6:2e:80:db:07:4b:7e:81:97:3b:82:f7:bd:
                    a3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:79:FE:4D:04:87:CF:E3:74:9A:AC:85:54:4D:4A:78:4A:8B:0C:E9
            X509v3 Authority Key Identifier:
                keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:71:03:31:b8:e2:fc:cd:43:59:ac:ce:5b:0d:7b:35:81:90:
         a1:4d:8b:99:d5:1d:b8:70:69:43:6f:82:45:fc:a0:1f:8c:10:
         1e:ff:e9:78:b1:7a:2c:d8:51:fd:a6:26:98:01:75:5e:90:7e:
         e5:a7:08:bf:2f:d3:b1:fc:cc:8c:e8:28:7f:8e:ff:b2:20:0e:
         6a:ef:e0:74:95:be:d5:eb:81:a2:a7:04:0c:57:ee:35:55:43:
         c7:8b:45:ed:b9:2f:79:04:45:a5:77:e6:30:0a:1c:a5:2c:60:
         74:1b:52:e9:6d:92:8f:04:e7:6c:00:cb:f3:e8:c5:93:e6:d5:
         f9:ac:46:48:51:45:37:fb:3f:ca:b4:77:f0:82:f1:fe:a4:2e:
         20:d5:4b:e7:87:e5:22:ed:46:05:59:f5:88:c5:e6:a5:8a:6f:
         15:64:1f:bc:25:43:3b:f1:42:a5:ce:00:0e:06:f7:db:ff:04:
         f2:50:ef:1b:72:cd:2b:fb:62:53:66:82:4b:82:f8:25:43:03:
         b6:6f:4a:c0:88:fe:20:a0:86:5d:4a:fb:79:00:63:de:56:ba:
         1a:fe:65:f0:0b:95:8c:78:bf:ff:df:1e:b9:ca:0c:92:92:6a:
         b7:ca:a1:7e:82:22:81:a7:76:af:b2:12:b0:db:7f:03:22:c2:
         0a:f1:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:12:24 2026 by rpki-client